CVE-2020-15232: 
Java vulnerability analysis and mitigation

A vulnerability was discovered in mapfish-print before version 3.24 that allows users to perform XML External Entity (XXE) attacks through the provided SDL style (GitHub Advisory). The vulnerability was assigned CVE-2020-15232 and was disclosed in July 2020.

The vulnerability is classified as an XML External Entity (XXE) attack vulnerability, which is identified under CWE-611. The issue affects multiple Maven packages including org.mapfish.print.print-lib, org.mapfish.print.print-servlet, and org.mapfish.print.print-standalone, in versions 3.0 through 3.24 (GitHub Advisory).

The vulnerability allows attackers to perform XML External Entity (XXE) attacks through SDL style files, which could potentially lead to unauthorized access to system files, denial of service, or other security implications (GitHub Advisory).

The vulnerability can be exploited by providing maliciously crafted SDL style files to the application (GitHub Advisory).

The vulnerability was patched in version 3.24 of mapfish-print. Users are advised to upgrade to version 3.24 or later to address this security issue. No workarounds are available for earlier versions (GitHub Advisory, GitHub Patch).